After some browsing I found that Apache has moved away from the group-based authorization scheme. (see: https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=23332792)
Thanks for pointing that out, Myrna, I had missed that. I think we should update some of our internal documents so that they reflect the new process. I'll try to pursue that. In the meantime, Abhinav, I have assigned DERBY-6773 to you. We should now be able to continue the discussion about DERBY-6773 on that issue. thanks, bryan
